Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

DRVSTORE error


  • Please log in to reply
15 replies to this topic

#1 arizonaredhead

arizonaredhead

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 13 May 2012 - 10:41 PM

My son's pc (Windows XP Home) blue screened today. On restart I logged in as Administrator and once the desktop was up the System32 folder opened. I noticed that one file has its name in blue letters (as opposed to the normal black of all the other folders). I know just enough about computers to know that I should not mess with any of the System32 files. I ran a Google search but of course most of the hits were just trying to sell me a program to fix that error and I also know that buying into those types of "fixes" is a good way to install serious malware. So I came here because you guys have always helped me out and never tried to sell me crap I don't need.B)

Edited by arizonaredhead, 13 May 2012 - 10:42 PM.


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:54 AM

Posted 13 May 2012 - 11:49 PM

Hi -
Please download BlueScreenView (in zip file)
  • Extract (right-click > Extract all) the contents of bluescreenview.zip.
  • Double-click on the BlueScreenView.exe file, to run the program. (No installation is required.)
  • When scanning is done (usually complete by the time the interface appears), go ...
  • Edit > Select All
  • File > Save Selected Items, and save the report to your Desktop as BSOD.txt.
  • Close the BlueScreenView window... ... ...
  • Open BSOD.txt using Notepad and go ... .... ..
  • Edit > Select All
  • Edit > Copy, and then paste the entire contents of the text file into your next reply.
Hopefully someone can diagnose the error messages for you -

Thank You -

#3 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 14 May 2012 - 08:07 PM

Okay, here is the report from the bluescreen viewer

==================================================
Dump File : Mini051412-01.dmp
Crash Time : 5/14/2012 5:32:07 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a933
Parameter 3 : 0xb611a9e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98f48
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63933
Stack Address 1 : win32k.sys+98f48
Stack Address 2 : win32k.sys+98a8f
Stack Address 3 : win32k.sys+9c81
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051412-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051312-02.dmp
Crash Time : 5/13/2012 2:12:46 PM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a933
Parameter 3 : 0xb3e899e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98f48
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63933
Stack Address 1 : win32k.sys+98f48
Stack Address 2 : win32k.sys+98a8f
Stack Address 3 : win32k.sys+9c81
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051312-02.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051312-01.dmp
Crash Time : 5/13/2012 11:02:37 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x817ffffc
Parameter 2 : 0x00000000
Parameter 3 : 0x8053aab4
Parameter 4 : 0x00000000
Caused By Driver : nv4_mini.sys
Caused By Address : nv4_mini.sys+6ee0b
File Description : NVIDIA Compatible Windows 2000 Miniport Driver, Version 175.19
Product Name : NVIDIA Compatible Windows 2000 Miniport Driver, Version 175.19
Company : NVIDIA Corporation
File Version : 6.14.11.7519
Processor : 32-bit
Crash Address : ntkrnlpa.exe+22f5f
Stack Address 1 : ntkrnlpa.exe+493ae
Stack Address 2 : ntkrnlpa.exe+6d600
Stack Address 3 : ntkrnlpa.exe+63ab4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051312-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini051012-01.dmp
Crash Time : 5/10/2012 3:28:33 AM
Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA
Bug Check Code : 0x00000050
Parameter 1 : 0x817ffffc
Parameter 2 : 0x00000000
Parameter 3 : 0x8053aaa4
Parameter 4 : 0x00000000
Caused By Driver : ntkrnlpa.exe
Caused By Address : ntkrnlpa.exe+22f43
File Description : NT Kernel & System
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+22f43
Stack Address 1 : ntkrnlpa.exe+4939a
Stack Address 2 : ntkrnlpa.exe+6d5f0
Stack Address 3 : ntkrnlpa.exe+63aa4
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini051012-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================

==================================================
Dump File : Mini050712-01.dmp
Crash Time : 5/7/2012 2:19:23 AM
Bug Check String : KERNEL_MODE_EXCEPTION_NOT_HANDLED
Bug Check Code : 0x1000008e
Parameter 1 : 0xc0000005
Parameter 2 : 0x8053a923
Parameter 3 : 0xaddfc9e8
Parameter 4 : 0x00000000
Caused By Driver : win32k.sys
Caused By Address : win32k.sys+98fe8
File Description : Multi-User Win32 Driver
Product Name : Microsoft® Windows® Operating System
Company : Microsoft Corporation
File Version : 5.1.2600.6206 (xpsp_sp3_gdr.120411-1615)
Processor : 32-bit
Crash Address : ntkrnlpa.exe+63923
Stack Address 1 : win32k.sys+98fe8
Stack Address 2 : win32k.sys+98b2f
Stack Address 3 : win32k.sys+9c91
Computer Name :
Full Path : C:\WINDOWS\Minidump\Mini050712-01.dmp
Processors Count : 2
Major Version : 15
Minor Version : 2600
Dump File Size : 65,536
==================================================





#4 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:11:54 AM

Posted 14 May 2012 - 10:47 PM

system32 folder show DRVSTORE file name in blue

That's normal: Blue-coloured file/folder names indicate compression. Both DRVSTOR and dllcache folders are in blue in my own system32 folder.

5 minidumps in the last week: The BlueScreenView report is not overly helpful in this case. Let's collect some more information: I'll have a look at it and help you try to resolve the BSOD problem.

:step1: Download the following 2 files and save both to the My Documents folder:

:step2: Go to the My Documents folder and run #1 (BSOD_XP_v1.3_jcgriff2_PROD_.exe). (That will also run #2.)

It will take a little time to complete: Please be patient and wait for it to finish.
A new folder named TSF_XP_Support will be created in My Documents.

:step3: Zip up the newly created TSF_XP_Support folder.
  • Right-click on the TSF_XP_Support folder > Send to ... > Compressed (zipped) Folder.
    The newly created zip file will be located in the My Documents folder.

:step4: Please upload the zip file to a file sharing website of your choice and and post a link to it in this thread so that we can access your uploaded zip file.

Note: The BC forums will allow a total attachment size of only 512 kb (and what you need to attach will exceed this limit).
See the suggestions in the following links for recommendations on file sharing websites:
  • http://lifehacker.com/388284/best-online-file-sharing-services
  • http://www.hongkiat.com/blog/15-great-free-online-file-sharing-alternatives/
  • http://www.smashingapps.com/2008/08/28/5-best-free-file-hosting-services-to-store-your-files.html

:step5: Please Publish a Snapshot using Speccy, and post a link to it in this thread.
  • It is a convenient and accurate way of providing us with details of your computer specifications.

:step6: Please download MiniToolBox, save it to your desktop and run it.
  • Checkmark the following checkboxes:
    • List Installed Programs
  • Click Go.
    When the scan is finished, a text file will open in a Notepad window.
  • Copy the entire contents of the Notepad window, and paste in your reply.
    (Result.txt will be saved in the same directory the tool is run.)

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 21 May 2012 - 10:57 PM


Okay, sorry it took me so long to get back to this. I hope I got everything you asked for. Please let me know if there is anything I missed or did not do correctly.:busy:


http://www.mediafire.com/?0jxvfa1a5lcc1bf

http://speccy.piriform.com/results/AMkIEzqAzgyYXkazFfCmXhY

MiniToolBox by Farbar Version: 18-01-2012
Ran by Tracy Vaillancourt (administrator) on 21-05-2012 at 20:55:23
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

=========================== Installed Programs ============================

Acrobat.com (Version: 2.0.0)
Acrobat.com (Version: 2.0.0.0)
Adobe AIR (Version: 1.5.3.9130)
Adobe Flash Player 11 ActiveX (Version: 11.2.202.235)
Adobe Flash Player 11 Plugin (Version: 11.2.202.235)
Adobe Reader 9.5.0 (Version: 9.5.0)
Apple Application Support (Version: 2.1.5)
Apple Mobile Device Support (Version: 4.0.0.96)
Apple Software Update (Version: 2.1.3.127)
Ask Toolbar (Version: 1.13.1.0)
Babylon toolbar on IE
Belarc Advisor 8.1
Belkin Wireless G Plus MIMO USB Network Adapter (Version: 1.00.000)
Bing Bar (Version: 7.0.609.0)
Bonjour (Version: 3.0.0.10)
Brother BRAdmin Light 1.12 (Version: 1.12)
Brother MFL-Pro Suite MFC-6490CW (Version: 1.0.7.0)
Carmen Sandiego's Great Chase Through Time
Conduit Engine (Version: )
Disney Toontown Online (Version: )
Dropbox (Version: 1.4.3)
Freeze.com NetAssistant (Version: 3.8.3)
Google Chrome (Version: 18.0.1025.168)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.3.2710.138)
Google Update Helper (Version: 1.3.21.111)
I Want This (Version: 1.14.149.149)
Itibiti RTC (Version: 0.0.1)
iTunes (Version: 10.5.0.142)
Java Auto Updater (Version: 2.0.6.1)
Java™ 6 Update 29 (Version: 6.0.290)
Junk Mail filter update (Version: 14.0.8089.726)
Living 3D Dolphin (Version: 1.0.2)
LivingPlay
Magic Ball Adventures
McAfee SecurityCenter (Version: 11.0.669)
McAfee Virtual Technician (Version: 5.5.0.0)
McAfee Virtual Technician (Version: 6.0.0.0)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Default Manager (Version: 2.1.54.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Professional 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft Software Update for Web Folders (English) 12 (Version: 12.0.6612.1000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft UI Engine (Version: 4.0.0318.1)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Mozilla Firefox (3.6.8) (Version: 3.6.8 (en-US))
MSN
MSVCRT (Version: 14.0.1468.721)
MSXML 6 Service Pack 2 (KB973686) (Version: 6.20.2003.0)
NetAssistant (Version: 3.8.3)
NetMeter 0.8.6.0
Network Stumbler 0.4.0 (remove only)
NVIDIA Drivers
OurWorld.com Toolbar (Version: 6.3.3.3)
OverDrive Media Console (Version: 3.2.10)
PaperPort Image Printer (Version: 1.00.0000)
Platform (Version: 1.20)
PriceGong 2.5.0 (Version: 2.5.0)
QuickTime (Version: 7.69.80.9)
Safari (Version: 5.34.51.22)
SaveTheChildren Reminder by We-Care.com v4.0.18.4 (Version: 4.0.18.4)
Segoe UI (Version: 14.0.4327.805)
Shop to Win 14 (Version: 1.018)
Speccy (Version: 1.16)
System Requirements Lab
Unity Web Player (Version: )
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2598290) 32-Bit Edition
Update for Windows Internet Explorer 8 (KB976662) (Version: 1)
Update for Windows XP (KB2345886) (Version: 1)
Update for Windows XP (KB2541763) (Version: 1)
Update for Windows XP (KB2607712) (Version: 1)
Update for Windows XP (KB2616676) (Version: 1)
Update for Windows XP (KB2641690) (Version: 1)
Update for Windows XP (KB951978) (Version: 1)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB961503) (Version: 1)
Update for Windows XP (KB967715) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971029) (Version: 1)
Update for Windows XP (KB971737) (Version: 1)
Update for Windows XP (KB973687) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
VIA Platform Device Manager (Version: 1.20)
WebFldrs XP (Version: 9.50.7523)
WeeWorld Toolbar (Version: 1.514)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8098.930)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Family Safety (Version: 14.0.8093.805)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live OneCare safety scanner
Windows Live Photo Gallery (Version: 14.0.8081.709)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Toolbar (Version: 14.0.8064.206)
Windows Live Upload Tool (Version: 14.0.8014.1029)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3 (Version: 20080414.031525)
Yahoo! Detect
Yahoo! Software Update
Yahoo! Toolbar
Yontoo Layers Client 1.10.01 (Version: 1.10.01)

**** End of log ****






#6 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 05 June 2012 - 10:00 PM

I started a post about this three weeks ago. I did everything I was asked to do to supply detailed information, but no one has responded with any suggestions. So here is a link back to the post with all the utility results posted. Please someone help me with this. I just do not know what to do.

http://www.bleepingcomputer.com/forums/topic453548.html

Edited by Budapest, 06 June 2012 - 12:45 AM.
Topic merged ~Budapest


#7 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:11:54 AM

Posted 06 June 2012 - 12:01 AM

My apologies for overlooking this topic, and not replying in a timely fashion. I don't know what happened there. I will get a Mod to merge this new topic with your previous one.

Please feel free to PM me or to post in your topic if you think you are being neglected at any time. Sometimes it happens that a helper simply loses track of topics and forgets.

I will review the information that you have provided.

Meantime, if you have experienced any more crashes on the system, please zip up the new minidumps and attach the resultant zip file to a reply:
  • Navigate to C:\Windows\Minidump <<< folder
  • Click on the first minidump file to select it.
  • Hold down the <Shift> key, and click on the last minidump file to select all of the files.
  • Release the <Shift> key.
  • Now, right-click on any one of the selected files > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Minidump folder).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#8 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:11:54 AM

Posted 06 June 2012 - 04:43 AM

I have drawn a blank so far, with regard to determining the cause of the BSODs. Debugging the crash dumps has not yielded anything of much use.

Can you bring me up to date with how the computer is behaving now. How often is it crashing? What are you doing when the system crashes? Is there any sign of malware on the system?

The two Event logs previously collected by the jcgriff2 application are corrupt.

Please gather the info by the following means, and upload it for my review.

:exclame: Create a new folder on your Desktop, and name it EventLogs.

:step1: Event logs
  • Go to Start > Run and type eventvwr.msc and press <ENTER>
  • When the Event Viewer window has opened, on the left side, click on System.
  • On the top main menu bar, click Action > Save Log File As ...
  • Enter system as the "File Name" and choose the EventLogs folder on your Desktop as the "Location" to save it.
    (Leave the "Save as type:" as the default setting of "Event Log (*.evt)").
  • Click Save.
Do the same for the Application log:
  • On the left side, click on Application.
  • On the top main menu bar, click Action > Save Log File As ...
  • Enter application as the "File Name" and choose the EventLogs folder on your Desktop as the "Location" to save it.
    (Leave the "Save as type:" as the default setting of "Event Log (*.evt)").
  • Click Save.
Close the Event Viewer window.


:step2: At your Desktop, zip up the EventLogs folder
  • Right-click on the folder > Send to ... > Compressed (zipped) Folder.
.
and attach the zip file to your next post in this thread.
  • When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.
Note: The BC forums will allow a total attachment size of only 512 kb and what you need to attach may exceed this limit. In that case, please upload the zip file to a file sharing website of your choice and and post a link to it in this thread so that we can access your uploaded zip file.

=============
Note: If your Event logs are corrupt try fixing them by the following means ...

========================
BSOD BUGCHECK SUMMARY
................................................................
Loading Dump File [C:\CactusIsland\arizonaredhead_BC\TSF_XP_Support\Mini051412-01.dmp]
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp3_gdr.120411-1615
Debug session time: Tue May 15 10:24:50.985 2012 (UTC + 10:00)
System Uptime: 0 days 21:08:16.676
Probably caused by : win32k.sys ( win32k!vSrcCopyS32D32Identity+5b )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
FAILURE_BUCKET_ID: 0x8E_win32k!vSrcCopyS32D32Identity+5b
Bugcheck code 1000008E
Arguments c0000005 8053a933 b611a9e8 00000000
................................................................
Loading Dump File [C:\CactusIsland\arizonaredhead_BC\TSF_XP_Support\Mini051312-02.dmp]
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp3_gdr.120411-1615
Debug session time: Mon May 14 07:05:30.071 2012 (UTC + 10:00)
System Uptime: 0 days 3:03:16.852
Probably caused by : win32k.sys ( win32k!vSrcCopyS32D32Identity+5b )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
FAILURE_BUCKET_ID: 0x8E_win32k!vSrcCopyS32D32Identity+5b
Bugcheck code 1000008E
Arguments c0000005 8053a933 b3e899e8 00000000
................................................................
Loading Dump File [C:\CactusIsland\arizonaredhead_BC\TSF_XP_Support\Mini051312-01.dmp]
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp3_gdr.120411-1615
Debug session time: Mon May 14 03:55:36.671 2012 (UTC + 10:00)
System Uptime: 3 days 7:28:31.556
Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!vSrcCopyS32D32Identity+5b )
PAGE_FAULT_IN_NONPAGED_AREA (50)
MM_INTERNAL_CODE: 0
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
FAILURE_BUCKET_ID: 0x50_win32k!vSrcCopyS32D32Identity+5b
Bugcheck code 00000050
Arguments 817ffffc 00000000 8053aab4 00000000
................................................................
Loading Dump File [C:\CactusIsland\arizonaredhead_BC\TSF_XP_Support\Mini051012-01.dmp]
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp3_gdr.111025-1629
Debug session time: Thu May 10 20:21:22.144 2012 (UTC + 10:00)
System Uptime: 3 days 1:02:17.217
Could not read faulting driver name
Probably caused by : win32k.sys ( win32k!vSrcCopyS32D32Identity+5b )
PAGE_FAULT_IN_NONPAGED_AREA (50)
MM_INTERNAL_CODE: 0
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x50
FAILURE_BUCKET_ID: 0x50_win32k!vSrcCopyS32D32Identity+5b
Bugcheck code 00000050
Arguments 817ffffc 00000000 8053aaa4 00000000
................................................................
Loading Dump File [C:\CactusIsland\arizonaredhead_BC\TSF_XP_Support\Mini050712-01.dmp]
Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible
Built by: 2600.xpsp_sp3_gdr.111025-1629
Debug session time: Mon May 7 19:12:00.880 2012 (UTC + 10:00)
System Uptime: 18 days 8:11:52.760
Probably caused by : win32k.sys ( win32k!vSrcCopyS32D32Identity+5b )
KERNEL_MODE_EXCEPTION_NOT_HANDLED_M (1000008e)
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".
DEFAULT_BUCKET_ID: DRIVER_FAULT
BUGCHECK_STR: 0x8E
FAILURE_BUCKET_ID: 0x8E_win32k!vSrcCopyS32D32Identity+5b
Bugcheck code 1000008E
Arguments c0000005 8053a923 addfc9e8 00000000
................................................................

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#9 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 06 June 2012 - 07:28 AM

Okay, I'll get on the files you need. Determining what the events are leading up to the crashes (and it is crashing at least once while he (my nine year old) is on it in the evenings. He has had his own machine since he was five, so he is very comfortable using it, the problem is that he is a 9 year old with ADHD, so getting him to track what is going on and note the events that seem to cause the crash is next to impossible. However, I institute a MANDATE from the DICTATOR (me) and explain to him that failure to comply could result in a smoking heap of rubble where his computer used to be.

#10 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 06 June 2012 - 10:21 PM

Okay here are the two log files you asked for. As for what is going on when the blue screen shows up, my son says he is usually playing Moshi Monsters (online game subscription type) and he may have an instance or two of Chrome running because being the super multi-tasker that he is (ADHD) he can play the game and surf the web at the same time! (Oh and watch TV too). So he says everything is fine, then he walks away from his computer for a "few" minutes (that could be as little as 5 mins or as much as 4or 5 hours) and when he comes back - Voila! The magic blue screen of death is back!

Attached Files



#11 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:11:54 AM

Posted 07 June 2012 - 05:00 PM

Those event logs are better: Thanks.

Let's see if we can make some headway: I would like you to collect and provide me with a couple of bits of information and then test the system without using a screensaver.

:step1: To check your system's "Recoveros" (Recovery) and Page File settings via Windows Management Instrumentation (WMI), please download and then run the following:

:step2: In an earlier post (post #4, the first step), the instructions called for downloading autoruns.exe to the "My Documents" folder. When you ran the jcgriff2 application it was also supposed to run autoruns and provide the output .... but that didn't happen. I would like you now to run autoruns.exe and provide me with the output:
  • Double-click on autoruns.exe to run the application.
    Please be patient: It may take a little time to complete scanning of the system.
  • When scanning is complete, on the main menu at the top, go to File > Save.
  • Choose to Save the file to your Desktop, with the default name of AutoRuns.
    The default file type will be Autoruns Data (.arn)
  • Close autoruns.
At the Desktop, zip up the Autoruns.arn file and attach to your reply:
  • Right-click on the AutoRuns.arn file > Send to ... > Compressed (zipped) Folder.
    The zip file will be located in the same place (the Desktop).
  • Attach the zip file to your next reply.
    When you click on Add Reply, you will see the facility to attach a file just below the box where you type your message.
:exclame: Note: The BC forums will allow a total attachment size of only 512 kb and what you need to attach may exceed this limit. In that case, please upload the zip file to a file sharing website of your choice and and post a link to it in this thread so that we can access your uploaded zip file.


:step3: Test system without using a screensaver.

So he says everything is fine, then he walks away from his computer for a "few" minutes (that could be as little as 5 mins or as much as 4or 5 hours) and when he comes back - Voila! The magic blue screen of death is back!

That could be a significant observation. Let's look at the use of a screensaver, and the possibility that the screensaver that is being used is causing a problem. In the application event log there is a repeated error being recorded:

Faulting application living~1.scr, version 0.0.0.0, faulting module living~1.scr, version 0.0.0.0


Looking at the list of installed programs, the screensaver being used appears likely to be Living 3D Dolphin (Version: 1.0.2)

Please disable the use of a screensaver altogether for the time being, and test the system to see whether that cures the BSOD problem. You might also consider uninstalling Living 3D Dolphin (Version: 1.0.2).
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#12 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 07 June 2012 - 09:27 PM

Something is not working right with WMI, I downloaded it, then ran it, and even though a Notepad instance was created (wmic_recoveros_page) it is blank. I saw a command prompt window displaying some data but it flashed on and off so fast I can't make anything out. I tried running the WMI several times with the same results. : ( ? Okay, I am attaching the zipped autorun file, It actually did not take very long for that to complete the scan, like maybe 30 seconds. I don't know if that is good or bad. I removed the dolphin screensaver and I will leave it with no screen saver running for now. LCD monitors don't suffer from burn-in do they? Not that I know of anyway.

Thanks again for your help!

Attached Files



#13 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:11:54 AM

Posted 07 June 2012 - 10:32 PM

LCD monitors don't suffer from burn-in do they?

No problem with that. You could always get him to turn off the monitor ... and save power?

AutoRuns is good: Thanks. We could make some changes there to improve things later if you wish.

We'll leave recoveros for now.

Let me know how the system behaves with no screensaver used.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#14 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 08 June 2012 - 08:52 PM

will do! He is grounded and can't play outside, and I took his iPod touch for a week, so I'm sure we will hear about it if there are anymore problems as his computer is one of the few things he is allowed to touch at this point! Thanks!

#15 arizonaredhead

arizonaredhead
  • Topic Starter

  • Members
  • 84 posts
  • OFFLINE
  •  
  • Local time:06:54 PM

Posted 17 June 2012 - 11:24 AM

Well, I guess we are not done yet. I found another blue screen when I was waking the boy up this morning. The dolphin screensaver has been uninstalled. Please advise which utilities should be run for diagnostics.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users